--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-28T12:36:21Z" generateName: system:openshift:openshift-monitoring- labels: metrics.openshift.io/csr.subject: prometheus managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: cluster-policy-controller operation: Update subresource: approval time: "2026-07-28T12:36:21Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-28T12:36:21Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} f:labels: .: {} f:metrics.openshift.io/csr.subject: {} manager: operator operation: Update time: "2026-07-28T12:36:21Z" name: system:openshift:openshift-monitoring-xwfkz resourceVersion: "8557" uid: 78920879-a78a-4263-b58f-36bf8c056ed8 spec: extra: authentication.kubernetes.io/credential-id: - JTI=cbb6e536-c9a5-41a7-8113-71154feed6db authentication.kubernetes.io/node-name: - ip-10-0-137-92.ec2.internal authentication.kubernetes.io/node-uid: - b3ed6d1b-7cb2-4f54-9b40-55f0ec21d550 authentication.kubernetes.io/pod-name: - cluster-monitoring-operator-548b489cb8-q9znf authentication.kubernetes.io/pod-uid: - d14de7a2-2981-41a0-b3c2-980fd5ba681b groups: - system:serviceaccounts - system:serviceaccounts:openshift-monitoring - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client uid: 5b631f63-73de-4c3b-9c7c-56593e332410 usages: - digital signature - key encipherment - client auth username: system:serviceaccount:openshift-monitoring:cluster-monitoring-operator status: certificate: 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 conditions: - lastTransitionTime: "2026-07-28T12:36:21Z" lastUpdateTime: "2026-07-28T12:36:21Z" message: Auto-approved CSR "system:openshift:openshift-monitoring-xwfkz" reason: AutoApproved status: "True" type: Approved